New point compression method for elliptic \(\mathbb{F}_{q^2}\)-curves of \(j\)-invariant 0
type: Item
instance of: scholarly article
title: New point compression method for elliptic \(\mathbb{F}_{q^2}\)-curves of \(j\)-invariant 0
zbMATH Open document ID: 1467.14067
author: Dmitrii Koshelev
published in: Finite Fields and their Applications
publication date: 2021-02-19T00:00:00Z
review text: In Elliptic Curve Cryptography an usual tool is a compression representation of a point \((x,y)\)\, of the underlying elliptic curve defined over a finite field \(\mathbb{F}_q\). Usually this is done taking the \(x\)-coordinate plus a single bit. The present paper proposes a new method for ordinary elliptic curves \(E_b: y^2=x^3+b\),\, defined over \(\mathbb{F}_{q^2}\),\,field of characteristic \(p\equiv 1 \bmod 3\),\, method that \lq \lq seem to be much faster than the classical one with \(x\)-coordinate, which requires two exponentiations in \(\mathbb{F}_q\).'' (for the decompression stage).\par The proposed method uses the Weil restriction \(R_b= R_{\mathbb{F}_{q^2}/\mathbb{F}_q}(E_b)\)\, and the generalized Kummer surface \(GK_b=R_b/[\omega]_2\), with \([\omega]_2\) the automorphism induced by a cubic root of 1, \(\omega \in \mathbb{F}_p\).\par \(GK_b\)\, is proved to be \(\mathbb{F}_{q^2}\)-rational and the paper, applying the theory of conic bundles, find a birational \(\mathbb{F}_q\)-isomorphism \(GK_b\approx \mathbb{A}^2\),\, which gives the looked compression. \par To recover the original point of the curve one need to compute one cubic root in \(\mathbb{F}_q\)\, which, for \(q\not \equiv 1 \bmod 27\),\, requires one exponentiation in \(\mathbb{F}_q\).\par Sections 1 and 2 gather the necessary mathematical background and some auxiliary results. The proposed compression is showed in Section 3. Theorem 12 proves (for \(q=p)\)\, that \(GK_b\)\, is \(\mathbb{F}_p\)-rational and gives the birational isomorphism \(GK_b\approx \mathbb{A}^2\).\par Section 3.1 instantiates the compression method to a family of curves, family including the pairing-friendly curve BLS12-381, [\url{https://z.cash/blog/new-snark-curve/}], and studies the complexity of the compression and decompression stages, see Table 1.
Mathematics Subject Classification ID: 14G50
Mathematics Subject Classification ID: 68P30
Mathematics Subject Classification ID: 14H52
Mathematics Subject Classification ID: 14E08
Mathematics Subject Classification ID: 14H60
zbMATH DE Number: 7313137
zbMATH Keywords: pairing-based cryptography
zbMATH Keywords: elliptic curves with \(j=0\)
zbMATH Keywords: point compression
zbMATH Keywords: Weil restriction
zbMATH Keywords: generalized Kummer surfaces
zbMATH Keywords: rationality problems
zbMATH Keywords: conic bundles
zbMATH Keywords: singular cubic surfaces
reviewed by: Juan Tena Ayuso
describes a project that uses: Magma
MaRDI profile type: Publication
full work available at URL: j.ffa.2020.101774
OpenAlex ID: W3093642973
cites work: Point compression for Koblitz elliptic curves
cites work: Q4502491
cites work: Q4783726
cites work: Implementing the 4-dimensional GLV method on GLS elliptic curves with \(j\)-invariant 0
cites work: Endomorphisms for faster elliptic curve cryptography on a large class of curves
cites work: Four $$\mathbb {Q}$$ : Four-Dimensional Decompositions on a $$\mathbb {Q}$$ -curve over the Mersenne Prime
cites work: Four-dimensional Gallant-Lambert-Vanstone scalar multiplication
cites work: Identity-Based Cryptosystems and Signature Schemes
cites work: Guide to pairing-based cryptography
cites work: A taxonomy of pairing-friendly elliptic curves
cites work: Pairing-Friendly Elliptic Curves of Prime Order
cites work: Q4414287
cites work: Square Root Computation over Even Extension Fields
cites work: New cube root algorithm based on the third order linear recurrence relations in finite fields
cites work: Q5571530
cites work: Q2712108
cites work: RATIONAL SURFACES WITH A PENCIL OF RATIONAL CURVES
cites work: RATIONAL SURFACES WITH A PENCIL OF RATIONAL CURVES AND WITH POSITIVE SQUARE OF THE CANONICAL CLASS
cites work: Optimal Eta Pairing on Supersingular Genus-2 Binary Hyperelliptic Curves
cites work: Q5301801
cites work: The Arithmetic of Elliptic Curves
cites work: The Eta Pairing Revisited
cites work: Q4198877
cites work: Zariski \(K3\) surfaces
cites work: On Castelnuovo's criterion of rationality P\(_a\)=P\(_2\)=0 of an algebraic surface
cites work: Finite automorphism groups of complex tori of dimension two
cites work: Quotients of abelian surfaces
cites work: Q3815412
cites work: Q4771366
cites work: Solving conics over functions fields
cites work: Arithmetic on Singular Del Pezzo Surfaces
DOI: 10.1016/J.FFA.2020.101774
description: scientific article; zbMATH DE number 7313137